PH14786: Using non ASCII characters (ex. Chinese) in an SCIM filter fails

19.0.0.8: WebSphere Application Server Liberty 19.0.0.8
19.0.0.9: WebSphere Application Server Liberty 19.0.0.9
19.0.0.10: WebSphere Application Server Liberty 19.0.0.10
19.0.0.11: WebSphere Application Server Liberty 19.0.0.11
19.0.0.12: WebSphere Application Server Liberty 19.0.0.12
20.0.0.1: WebSphere Application Server Liberty 20.0.0.1
20.0.0.2: WebSphere Application Server Liberty 20.0.0.2
20.0.0.3: WebSphere Application Server Liberty 20.0.0.3
20.0.0.4: WebSphere Application Server Liberty 20.0.0.4
20.0.0.5: WebSphere Application Server Liberty 20.0.0.5

APAR status

• Closed as program error.

Error description

• An SCIM filter containing non ASCII characters (for example:
  Chinese) fails with an HTTP 400 error code and an error
  message that includes CWIML5003W message that lists the a
  "com.ibm.ws.security.wim.scim.parser.TokenMgrError" as a
  reason for the failure.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  SCIM users with filters containing non      *
  *                  ASCII characters                            *
  ****************************************************************
  * PROBLEM DESCRIPTION: Using non ASCII characters (ex.         *
  *                      Chinese) in an SCIM filter fails        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  An SCIM filter containing non ASCII characters (for example:
  Chinese) fails with an HTTP 400 error code and an error message
  that includes a CWIML5003W message that lists
  "com.ibm.ws.security.wim.scim.parser.TokenMgrError" as a reason
  for the failure.
  
  For example (where unicode_example is the unicode of the
  characters passed into the filter),
  {"Errors":[{"code":"400","description":"CWIML5003W: The
  'givenName co \"unicode_example\" or familyName co
  \"unicode_example\"' search filter cannot be parsed by the SCIM
  API for the following reason:
  com.ibm.ws.security.wim.scim.parser.TokenMgrError: Lexical error
  at line 1, column 15. Encountered: \"\unicode_example" (13850),
  after : \"\\\"\"","scimType":"invalidFilter"}]}
  

Problem conclusion

• The code that parses the SCIM filter was updated to handle
  unicode or non ASCII characters.
  
  The fix for this APAR is currently targeted for inclusion in fix
  pack 19.0.0.8.  Please refer to the Recommended Updates page for
  delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  LIBERTY PROFILE

• Fixed component ID

  5724J0814

Applicable component levels

• RCD0 PSY

     UP